mrhid6
e2b01b62a5
feat: add local_login_enabled setting with absent-means-on default
2026-08-03 10:36:48 +01:00
mrhid6
0858693d57
feat: add auth provider service layer and lockout guard
2026-08-03 10:33:36 +01:00
mrhid6
45f7c0c393
feat: add AuthProvider model and identity provider presets
2026-08-03 10:30:21 +01:00
mrhid6
c56bfb7270
docs: implementation plan for multiple auth providers
2026-08-03 10:23:35 +01:00
mrhid6
eb45072031
feat: Removed unused test units
2026-08-03 10:18:01 +01:00
mrhid6
1e2132c1a1
docs: Cleanup old specs and plans
2026-08-03 10:15:54 +01:00
mrhid6
19ef773690
docs: drop legacy OIDC callback from multi-provider design
2026-08-03 10:13:26 +01:00
mrhid6
c5aae0614a
docs: design for multiple auth providers
2026-08-03 10:09:13 +01:00
mrhid6
17d97aaf52
feat: More logging for command stream
Chart Release / chart (push) Successful in 12s
Server Deploy / deploy (push) Successful in 1m24s
Agent Release / build (push) Successful in 10m37s
Agent Release / msi (push) Successful in 36s
2026-07-31 17:20:35 +01:00
mrhid6
1fb9bd827f
feat: Added ping command
Chart Release / chart (push) Successful in 18s
Agent Release / build (push) Successful in 39s
Server Deploy / deploy (push) Successful in 55s
Agent Release / msi (push) Successful in 40s
2026-07-31 17:10:59 +01:00
mrhid6
8699dc5b7e
fix: Renew presence on sub/pub
Chart Release / chart (push) Successful in 18s
Server Deploy / deploy (push) Successful in 56s
2026-07-31 16:58:50 +01:00
mrhid6
71240f183c
fix: Fixes to server shutdown stream
Chart Release / chart (push) Successful in 21s
Server Deploy / deploy (push) Successful in 1m2s
Agent Release / build (push) Successful in 43s
Agent Release / msi (push) Successful in 49s
2026-07-31 16:44:47 +01:00
mrhid6
01e8b0ba44
feat: Better debugging for console
Chart Release / chart (push) Successful in 11s
Server Deploy / deploy (push) Successful in 1m25s
2026-07-31 16:31:19 +01:00
mrhid6
2aa4784518
feat: Better debugging for console
Chart Release / chart (push) Successful in 18s
Server Deploy / deploy (push) Successful in 59s
2026-07-31 16:13:51 +01:00
mrhid6
f611cae438
feat: Better debugging for console
Chart Release / chart (push) Successful in 11s
Server Deploy / deploy (push) Successful in 1m22s
2026-07-31 16:00:58 +01:00
mrhid6
1eb98ef962
feat: Better debugging for console
Chart Release / chart (push) Successful in 12s
Server Deploy / deploy (push) Successful in 1m22s
2026-07-31 15:51:26 +01:00
mrhid6
6f86496f10
fix: Ffixes to console
Chart Release / chart (push) Successful in 18s
Server Deploy / deploy (push) Successful in 1m9s
2026-07-31 15:05:21 +01:00
mrhid6
57a9b18102
fix: Guacd connection ip
Server Deploy / deploy (push) Successful in 9s
Chart Release / chart (push) Successful in 11s
2026-07-31 14:52:20 +01:00
mrhid6
36995fa62b
fix: Fixed install and update scripts
Chart Release / chart (push) Successful in 9s
Server Deploy / deploy (push) Successful in 1m20s
2026-07-31 12:10:32 +01:00
mrhid6
9121fc461f
fix: Fixed chart api routes for update
Server Deploy / deploy (push) Successful in 15s
Chart Release / chart (push) Successful in 10s
2026-07-31 12:03:45 +01:00
mrhid6
fc56bae5f9
chore: Bump chart version
Chart Release / chart (push) Successful in 18s
Server Deploy / deploy (push) Successful in 8s
Agent Release / build (push) Successful in 38s
Agent Release / msi (push) Successful in 57s
2026-07-31 11:53:08 +01:00
mrhid6
ac75b3ef76
feat: chart deployment Type added
Chart Release / chart (push) Successful in 20s
Server Deploy / deploy (push) Successful in 35s
2026-07-31 11:52:31 +01:00
mrhid6
e6fe463216
feat: Updated for api ingress routes
Chart Release / chart (push) Successful in 25s
Server Deploy / deploy (push) Successful in 4m26s
2026-07-31 11:21:15 +01:00
mrhid6
8528f14ed7
feat: Added ingress to chart
Chart Release / chart (push) Successful in 10s
Server Deploy / deploy (push) Successful in 1m24s
2026-07-31 10:49:20 +01:00
mrhid6
df1d9658f5
fix: Chart build
Chart Release / chart (push) Successful in 10s
Server Deploy / deploy (push) Successful in 1m20s
2026-07-31 10:41:41 +01:00
mrhid6
9f9b384481
fix: Fixed chart version
Chart Release / chart (push) Failing after 13s
2026-07-31 10:37:04 +01:00
mrhid6
165114471f
fix: Fixes to running on kubernetes
Chart Release / chart (push) Failing after 13s
Server Deploy / deploy (push) Successful in 6m35s
2026-07-31 10:34:10 +01:00
mrhid6
de78688093
feat: authenticate the server's Redis connection
...
InitRedis now takes a username and password, read from REDIS_USERNAME and
REDIS_PASSWORD, matching what admin has always done. Both empty keeps an
unauthenticated Redis working; a password with an empty username is what a
legacy requirepass instance needs, since go-redis then sends AUTH with one
argument instead of two.
This is what lets a Kubernetes install point at a managed Redis instead of
the bundled one.
2026-07-31 09:36:31 +01:00
mrhid6
bbf9f72fd3
feat: Docker and helm charts
Server Deploy / deploy (push) Successful in 5m26s
Agent Release / build (push) Successful in 10m45s
Agent Release / msi (push) Successful in 1m31s
2026-07-31 09:28:54 +01:00
mrhid6
978b665aa6
fix: stop local relay teardown from logging a spurious proxy_failed reason
...
Session.Close now closing its own accepted conn (from the prior fix wave)
made net.ErrClosed on the guacd-side reader indistinguishable from a real
remote failure, so a normal browser-tab close could race the handler's
defer and intermittently log console.proxy_failed on a healthy session.
Add a closing flag, set before Close's sync.Once body actually tears
anything down, that setReason respects -- a deliberate local teardown can
no longer produce or race in a failure reason, while Close's own explicit
reason argument still wins normally.
2026-07-31 09:25:27 +01:00
mrhid6
1fe608f531
fix: bound and complete console relay teardown, restore proxy_failed audit
...
- Arm the unclaimed-relay watchdog in NewSession rather than Serve, so an
agent that never opens its ProxyStream is bounded to 10s and reports
reason "agent_timeout", per the design spec's failure-mode table.
- Session.Close now also closes the accepted net.Conn (stored via setConn),
so ConsoleProxy.Close() is an unconditional kill of the whole relay chain
instead of only closing an already-idle listener.
- Emit console.proxy_failed and end the console session from a defer in
consoleTunnel guarded on relay.Reason(), since guac's OnDisconnect never
runs when the connect callback errors -- which is the path every relay
failure this feature introduces takes. Update the two docsite
troubleshooting rows to match what the audit event can now actually show.
2026-07-31 09:21:07 +01:00
mrhid6
1e1546cb60
docs: document the agent-relayed console proxy
...
Every console session now rides the agent's outbound gRPC connection
instead of a direct guacd-to-target dial, so it works for servers
behind NAT and now requires a live agent (409 agent_offline
otherwise). Documents PROXY_ADVERTISE_HOST / PROXY_LISTEN_HOST and
corrects reachability claims across the docsite and CLAUDE.md.
2026-07-31 09:10:05 +01:00
mrhid6
119d8694d1
feat: Reap admin free instance license
2026-07-30 14:42:06 +01:00
mrhid6
8d43c689f5
feat: Reap admin free instance
2026-07-30 14:31:43 +01:00
mrhid6
05f10ed3c9
feat: record relay proxy_id and port in console audit events
2026-07-29 13:10:58 +01:00
mrhid6
c0bec3737b
feat: route every console session through the agent relay
2026-07-29 13:07:30 +01:00
mrhid6
59d147fe4d
feat: handle OpenProxyCmd in the agent command stream
2026-07-29 13:03:02 +01:00
mrhid6
9e38a01e3d
feat: add agent-side console relay
2026-07-29 12:59:24 +01:00
mrhid6
20a302f84a
feat: add OpenConsoleProxy service facade
2026-07-29 12:55:36 +01:00
mrhid6
ba2e263d00
fix: collapse ProxyStream auth failures into one indistinguishable response
2026-07-29 12:52:53 +01:00
mrhid6
a000703199
feat: add ProxyStream handler with scoped single-use auth
2026-07-29 12:50:20 +01:00
mrhid6
8fcda63742
fix: avoid closing proxy relay listener before validating remote source
2026-07-29 12:47:35 +01:00
mrhid6
3363ac9dad
feat: add console proxy session relay
2026-07-29 12:43:04 +01:00
mrhid6
a7e338b171
feat: add console proxy session registry
2026-07-29 12:40:22 +01:00
mrhid6
bc79daab48
feat: add ProxyStream wire types for agent-relayed console
2026-07-29 12:37:37 +01:00
mrhid6
d3d8dba3ff
docs: Implementation plan for agent-relayed console proxy
2026-07-29 12:26:16 +01:00
mrhid6
6d047e25ab
docs: Design for agent-relayed console proxy
2026-07-29 12:16:45 +01:00
mrhid6
ed4c39650c
feat: Removed hq signup page
Server Deploy / deploy (push) Successful in 1m44s
2026-07-29 10:42:51 +01:00
mrhid6
7b8fa4a8a0
feat: Updated hq login page
Server Deploy / deploy (push) Successful in 40s
2026-07-29 10:35:07 +01:00
mrhid6
8a02c35ec9
docs: Updated docs
Server Deploy / deploy (push) Successful in 55s
2026-07-28 16:54:39 +01:00
mrhid6